ffmpeg - security update

Fixed packages 1

Vulnerabilities 10

• Critical 9.1
  CVE-2024-35366

  FFmpeg n6.1.1 is Integer Overflow. The vulnerability exists in the parse_options function of sbgdec.c within the libavf…

  ffmpeg ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• High 8.0
  CVE-2023-51795

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg libav ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• High 7.8
  CVE-2023-50010

  FFmpeg v.n6.1-3-g466799d4f5 allows a buffer over-read at ff_gradfun_blur_line_movdqa_sse2, as demonstrated by a call to…

  ffmpeg ffmpeg libav Debian Ubuntu
  Apr 19, 2024
• High 7.8
  CVE-2023-51793

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg ffmpeg libav ffmpeg-7 Debian Ubuntu Wolfi
  Apr 19, 2024
• High 7.8
  CVE-2023-51794

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the…

  ffmpeg ffmpeg ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 26, 2024
• High 7.8
  CVE-2023-51798

  Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via a f…

  ffmpeg ffmpeg ffmpeg-7 ffmpeg-7.1 Debian Ubuntu Wolfi
  Apr 19, 2024
• High 7.8
  CVE-2024-32230

  FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a negative-size-param bug at libavcodec/mpegvideo_enc.c:1216:21 i…

  ffmpeg ffmpeg libav Debian Ubuntu
  Jul 1, 2024
• Medium 6.5
  CVE-2024-36616

  An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of…

  ffmpeg ffmpeg libav Debian Ubuntu
  Nov 29, 2024
• Medium 6.2
  CVE-2024-36617

  FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder.

  ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine
  Nov 29, 2024
• Medium 5.3
  CVE-2024-31585

  FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum…

  ffmpeg Debian
  Apr 17, 2024